fwci-bin

MEDIUM
maintainer firmwareci 0 votes scanned 2026-11-06 12:12:41.156139
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:15 source_aarch64=("${pkgname}_${pkgver}_aarch64.tar.gz::https://fwci-cli.s3.eu-central-1.amazonaws.com/${pkgver}/fwci-${pkgver}.linux-arm64.tar.gz")

PKGBUILD

1 offending line(s) highlighted
1# This file was generated by GoReleaser. DO NOT EDIT.
2# Maintainer: BlindSpot Software <services@blindspot.software>
3
4pkgname='fwci-bin'
5pkgver=0.19.4
6pkgrel=1
7pkgdesc='CLI Tooling for FirmwareCI - binary distribution'
8url='https://firmware-ci.com/'
9arch=('aarch64' 'x86_64')
10license=('custom')
11provides=('fwci-cli' 'fwci')
12conflicts=('fwci')
13depends=('git')
14
15source_aarch64=("${pkgname}_${pkgver}_aarch64.tar.gz::https://fwci-cli.s3.eu-central-1.amazonaws.com/${pkgver}/fwci-${pkgver}.linux-arm64.tar.gz")
16sha256sums_aarch64=('6b59fe4df787aa0574214467af70699333bdfbfa8bd5947871a41eb42cb44da5')
17
18source_x86_64=("${pkgname}_${pkgver}_x86_64.tar.gz::https://fwci-cli.s3.eu-central-1.amazonaws.com/${pkgver}/fwci-${pkgver}.linux-amd64.tar.gz")
19sha256sums_x86_64=('966a4026ff6b14376dd14db95ea6aadf7fcdbe65996c44f937b642d0c501ebee')
20
21package() {
22 install -Dm755 ./fwci-*.linux-* "${pkgdir}/usr/bin/fwci"
23}
24

Changes since previous scan

--- PKGBUILD @ 2026-11-05 16:09
+++ PKGBUILD @ 2026-11-06 12:12
@@ -2,30 +2,23 @@
# Maintainer: BlindSpot Software <services@blindspot.software>
pkgname='fwci-bin'
-pkgver=0.19.2
+pkgver=0.19.4
pkgrel=1
pkgdesc='CLI Tooling for FirmwareCI - binary distribution'
url='https://firmware-ci.com/'
arch=('aarch64' 'x86_64')
-license=('')
-provides=('fwci-cli')
+license=('custom')
+provides=('fwci-cli' 'fwci')
conflicts=('fwci')
depends=('git')
-source_aarch64=("${pkgname}_${pkgver}_aarch64.tar.gz::https://github.com/blindspotsoftware/firmwareci/releases/download/v${pkgver}/fwci-${pkgver}.linux-arm64.tar.gz")
-sha256sums_aarch64=('a6c77a4af938b8b9f0be0592b67178dc7971a02f94003683878d0b172d64c386')
+source_aarch64=("${pkgname}_${pkgver}_aarch64.tar.gz::https://fwci-cli.s3.eu-central-1.amazonaws.com/${pkgver}/fwci-${pkgver}.linux-arm64.tar.gz")
+sha256sums_aarch64=('6b59fe4df787aa0574214467af70699333bdfbfa8bd5947871a41eb42cb44da5')
-source_x86_64=("${pkgname}_${pkgver}_x86_64.tar.gz::https://github.com/blindspotsoftware/firmwareci/releases/download/v${pkgver}/fwci-${pkgver}.linux-amd64.tar.gz")
-sha256sums_x86_64=('9d6877d788c620822cea899deb7085dece8a5b4b8cb11684e4dc9ea7bb6111dc')
+source_x86_64=("${pkgname}_${pkgver}_x86_64.tar.gz::https://fwci-cli.s3.eu-central-1.amazonaws.com/${pkgver}/fwci-${pkgver}.linux-amd64.tar.gz")
+sha256sums_x86_64=('966a4026ff6b14376dd14db95ea6aadf7fcdbe65996c44f937b642d0c501ebee')
package() {
- case "${CARCH}" in
- aarch64)
- install -Dm755 "./fwci-0.19.2.linux-arm64" "${pkgdir}/usr/bin/fwci-0.19.2.linux-arm64"
- ;;
- x86_64)
- install -Dm755 "./fwci-0.19.2.linux-amd64" "${pkgdir}/usr/bin/fwci-0.19.2.linux-amd64"
- ;;
- esac
+ install -Dm755 ./fwci-*.linux-* "${pkgdir}/usr/bin/fwci"
}

Scan history

Scanned at (UTC)SeverityRules
2026-11-06 12:12:41 Medium 1
2026-11-05 16:09:47 Clean 0
2026-11-05 10:09:05 Clean 0
2026-11-04 12:07:05 Clean 0
2026-11-04 10:06:54 Clean 0
2026-10-21 15:32:06 Clean 0
2026-10-19 15:25:12 Clean 0
2026-10-15 09:11:05 Clean 0
2026-10-07 14:05:47 Clean 0
2026-10-05 23:40:58 Clean 0
2026-09-07 17:15:15 Clean 0
2026-08-19 13:41:59 Clean 0
2026-08-18 09:39:35 Clean 0
2026-07-30 11:14:12 Clean 0
2026-07-23 11:23:42 Clean 0
2026-07-20 13:14:10 Clean 0
2026-07-15 09:48:24 Clean 0
2026-07-13 13:41:53 Clean 0
2026-07-01 10:41:16 Clean 0
2026-06-23 12:16:26 Clean 0

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion